CVE-2017-12450 The alpha_vms_object_p function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of...
HighCVSS 7.8
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The alpha_vms_object_p function in bfd/vms-alpha.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap write and possibly achieve code execution via a crafted vms alpha file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/binutils(Debian:12) | < 2.29-9 | 2.29-9 |
| debian/binutils(Debian:13) | < 2.29-9 | 2.29-9 |
| debian/binutils(Debian:14) | < 2.29-9 | 2.29-9 |
| GNU binutils | <= 2.29 | No fix listed |
References
- Debian Security Tracker CVE-2017-12450 vendor-advisory
- sourceware.org issue-tracking patch third-party-advisory